Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | RE: [WEB SECURITY] Fundamental error in Corsaire's paper? |
|---|---|
| Date: | Thu, 27 Apr 2006 21:26:18 +0100 |
I know I'm not the one you are asking, but I think setting the path is LESS secure. Not because of any technical reason, given the fact that its easily circumvented, but because of the false sense of security that gets placed by developers using the path.
Using the same logic though, one would be compelled to recommend not using SSL; the false sense of security 9-out-of-10 cats preferred. :P Martin... ---------------------------------------------------------------------- CONFIDENTIALITY: This e-mail and any files transmitted with it are confidential and intended solely for the use of the recipient(s) only. Any review, retransmission, dissemination or other use of, or taking any action in reliance upon this information by persons or entities other than the intended recipient(s) is prohibited. If you have received this e-mail in error please notify the sender immediately and destroy the material whether stored on a computer or otherwise. ---------------------------------------------------------------------- DISCLAIMER: Any views or opinions presented within this e-mail are solely those of the author and do not necessarily represent those of Corsaire Limited, unless otherwise specifically stated. ---------------------------------------------------------------------- Corsaire Limited, 3 Tannery House, Tannery Lane, Send, Surrey, GU23 7EF Telephone: +44(0)1483-226000 Email:info@corsaire.com ------------------------------------------------------------------------- Sponsored by: Watchfire Watchfire's AppScan is the industry's first and leading web application security testing suite, and the only solution to provide comprehensive remediation tasks at every level of the application. Change the way you think about application security testing - See for yourself. Download a Free Trial of AppScan 6.0 today! https://www.watchfire.com/securearea/appscansix.aspx?id=701300000007kaF --------------------------------------------------------------------------
| Previous by Date: | RE: [WEB SECURITY] Fundamental error in Corsaire's paper?, Amit Klein (AKsecurity) |
|---|---|
| Next by Date: | Re: Web Site Certification, Admin Dbtech |
| Previous by Thread: | Re: [WEB SECURITY] Fundamental error in Corsaire's paper?, Dan Kuykendall |
| Next by Thread: | RE: [WEB SECURITY] Fundamental error in Corsaire's paper?, Martin O'Neal |
| Indexes: | [Date] [Thread] [Top] [All Lists] |